Secure Communication using Gaussian-State Quantum illumination 
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A new paradigm for secure communication, based on quantum illumination, is proposed. Alice 
uses spontaneous parametric down- conversion to send Bob a set of signal modes over a pure-loss 
channel while retaining the set of idler modes with which they are maximally entangled. Bob 
imposes a single information bit on the modes he receives from Alice via binary phase-shift keying. 
He then adds classical Gaussian noise and sends the noisy modulated modes back to Alice over 
the same pure-loss channel. Even though the loss and noise destroy any entanglement between the 
modes that Alice receives from Bob and the idler modes she has retained, she can decode Bob's bit 
with an error probability that can be orders of magnitude lower than what is achieved by a passive 
eavesdropper who receives all the photons that are lost en route from Alice to Bob and from Bob 
to Alice. 

PACS numbers: 42.50.Dv, 03.67.Hk, 03.67.Mn 



The use of quantum key distribution (QKD) to en- 
sure the security of classical information transmission has 
moved from its theoretical roots [l|, 0, S| to a major net- 
work demonstration [3| . The objective of QKD is for two 
geographically separated users — Alice and Bob — to cre- 
ate a shared set of completely random key bits in manner 
that precludes an eavesdropper (Eve) from having any- 
thing more than an inconsequentially small amount of 
information about the entire set of key bits. That such 
a goal is possible arises from a fundamental quantum 
mechanical principle: Eve cannot tap the Alice-to-Bob 
channel without creating a disturbance on that channel. 

In this Letter we will introduce a new paradigm for se- 
cure communication using quantum resources. Although 
it can be used to generate a secret key, as in existing 
QKD systems, the enormous disparity between the bit 
error probabilities of a passive eavesdropper and the in- 
tended receiver make this scheme attractive for direct in- 
formation transmission. The basis for this new approach 
is quantum illumination, specifically the Gaussian-state 
radar system described in [5( . There, the entangled signal 
and idler outputs from spontaneous parametric down- 
conversion (SPDC) were shown to afford a substantial 
error probability advantage — over a coherent-state sys- 
tem of the same average transmitted photon number — 
when the signal beam is used to irradiate a target re- 
gion containing a bright thermal-noise bath in which a 
low-reflectivity object might be embedded, and the idler 
beam is retained at the transmitter for use in an opti- 
mal joint measurement with the light returned from the 
target region. This performance advantage is surprising, 
because the loss and noise combine to destroy any entan- 
glement between the return light and the retained idler. 
The origin of this advantage is the stronger-than-classical 
phase-sensitive cross correlation between the signal and 
idler produced by SPDC. When the source is operated in 
the low-brightness regime, this leads to a phase-sensitive 
cross correlation between the target return and the re- 
tained idler that outstrips any such correlation produced 



by a classical-state transmitter of the same average trans- 
mitted photon number || . Here, we will turn that capa- 
bility to the task of secure communication between Alice 
and Bob, despite the presence of a passive eavesdropper 
Eve. 

The communication system of interest functions as fol- 
lows. Alice uses SPDC to produce M signal-idler mode 
pairs, with annihilation operators {Ss m ,a/ m : 1 < m < 
M }, whose joint density operator p SI is the tensor prod- 
uct of independent, identically distributed (iid) density 
operators for each mode pair that are zero-mean, jointly 
Gaussian states with the common Wigner-distribution 
covariance matrix 
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where S = 2N S + 1 and C q = 2 V / N S (N S + 1), and N s 
is the average photon number of each signal (and idler) 
mode [6|. Alice sends her signal modes to Bob, retaining 
her idler modes for later use. Alicc-to-Bob transmission 
occurs over a pure- loss channel Q, so that Bob receives 
modes whose annihilation operators are 



a B„ 



Ka s„ 



VI - «e Bm , for 1 < m < M, (2) 



where the environmental modes, {es m }, are in their vac- 
uum states 0. Bob first imposes an identical, binary 
phase-shift keyed (BPSK) information bit (k = or 1) 
on each as m , yielding (— l) k a,B m - He then adds iid, zero- 
mean, isotropic, classical Gaussian noise, 7ie m , of vari- 
ance Nb to each (— l) k a,B m , and transmits the noisy mod- 



ulated modes, a' R 



(— l) k as m + riB m , back to Alice. 



After propagation through the same pure-loss channel, 
Alice receives modes whose annihilation operators are 



VT 



Ke A „ 



for 1 < m < M, 



(3) 



where the {e J 4 m } are in their vacuum states. Given Bob's 
information bit k, we have that p R j, the joint state of 



2 



Alice's {a_R m , aj m } modes, is the tensor product of iid, 
zero-mean, jointly Gaussian states for each mode pair 
with the common Wigner-distribution covariance matrix 

A (fe) _ 



,(4) 



where A = 2k 2 N s + 2kN b + 1 and C a = nC q . Alice's 
task is to decode Bob's bit, which is equally likely to be 
k = or k = 1, with minimum error probability. 

Eve will be assumed to collect all the photons that 
are lost en route from Alice to Bob and from Bob to 
Alice [Io| . i.e., she has at her disposal the mode pairs 
{ cs m , CR m : 1 < m < M } , where 
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= V 1 — K fls m 

Given Bob's bit value, Eve's joint density operator, 
Pcsch! ^ s the tensor product of M iid mode-pair den- 
sity operators that are zero-mean, jointly Gaussian states 
with the common Wigner-distribution covariance matrix 
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kNs, and 



where D = 2(1 — re)iVs 
i? = 2(1 - k)kA s + 2(1 - k)N b + 1. Eve too is interested 
in minimum error-probability decoding of Bob's bit. 

Alice's minimum error probability decision rule is 
to measure p^J — pgj , and declare that k — 1 was 
sent if and only if her measurement outcome is non- 
negative. Similarly, Eve's minimum error probabil- 
ity decision rule is to measure p^sc R ~ P^cJcr aim de- 
clare that k = 1 was sent if and only if her measure- 
ment outcome is non-negative. As noted for the quan- 
tum illumination radar problem treated in the ex- 
act error probabilities for these Gaussian-state hypoth- 
esis tests are not easy to evaluate. Thus,_as in 



we shall rely on quantum Chernoff bounds 11[, which 
are known to be exponentially tight for iid M mode- 
pair problems, i.e., with Pr(e) < e --Mnu«o<,<i £( a )/ 2) 

for £(s) = -bxfatffflytpffl) 1 -']), giving the Chernoff 
bound (in terms of the conditional mode-pair density op- 
on the exact error probability, we have 

lim ln[2Pr(e)]/M = max S (s). (8) 



orators p 



The BPSK symmetry in p^j and p [ c K J CR implies that s = 
1/2 optimizes the Chernoff bound exponents for both 



Alice and Eve. The following lower bound on the error 
probability of any receiver [5| will also be of use: 



Pr(e) > 



1 _ y/l _ e -2M£(l/2) 



(9) 



it is not exponentially tight for the problems at hand. 

Because all our conditional density operators are zero- 
mean Gaussian states, we can use the results of 12] to 
evaluate £(1/2) for Alice and Eve's receivers. To do so we 
need the symplectic diagonalizations of their conditional 
Wigner-distribution covariance matrices. The symplectic 
diagonalization of a 4 x 4 dimensional covariance matrix 
A consists of a 4 x 4 dimensional symplectic matrix S 
and a symplectic spectrum { i^n : 1 < n < 2 } that satisfy 
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A = Sdiag(i/i, v\, v 2 , v^S^ 



(10) 



(11) 



where diag(-, •, •, •) denotes a diagonal matrix with the 
given diagonal elements. 

For our quantum-illumination (Alice-to-Bob-to- Alice) 
communication, the symplectic matrices needed for the 



diagonalization of A^j are 

X+ (-l) fc X 

L (-i) fc x_ x+ 



for k = 0, 1. Here, X± = diag(x±, ±£±) with 



x± 



lA + S±^{A + S) 2 -4C% 
2^{A + Sf-ACl 



(12) 



(13) 



The associated symplectic spectra are identical for k = 
and 1, i.e., for n = 1,2 we have 



,(*0 



(-l) n (5 - A) + y/(A + Sf - 4C2 /8. (14) 



For Eve's attempt to listen in, the symplectic matrices 
needed for the diagonalization of A^ c are 



S {k) = 



for k = 0,1. Here, Y 
diag(sin(0),sin(#)) with 

cos(26») 



Y (-l) fc+1 Z 
(-l) fc Z Y 

diag(cos(#), cos(0)) and Z 



(15) 



D- E 



y/(D - Ef + 4C e 2 



(16) 



The associated symplectic spectra are identical for k = 
and 1, i.e., for n = 1, 2 we have 



{D + E)~{-l) n ^{D-EY+ACl /8. (17) 
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The preceding diagonalizations lead to Chernoff bound 
expressions that are far too long to exhibit here. In Fig. 1 
we compare the Chernoff bounds for Alice and Eve's op- 
timum quantum receivers when k = 0.1, Ng = 0.004, 
and Nb = 100. Also included in this figure is the 
error-probability lower bound from @ on Eve's optimum 
quantum receiver. We see that Alice's error probability 
upper bound — at a given M value — can be orders of mag- 
nitude lower than the Eve's error probability lower bound 
when both use optimum quantum reception. This occurs 
despite Eve's getting 9 times more of Alice's transmission 
than Bob does and 9 times more of Bob's transmission 
than Alice does. Note that Alice's performance advan- 
tage may be better assessed from comparing her error- 
probability upper bound with that of Eve's receiver, in 
that both are exponentially tight Chernoff bounds. 
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FIG. 1: (Color online) Error-probability bounds versus M, 
the number of SPDC mode pairs, assuming Ns = 0.004, 
K = 0.1, and Nb ~ 100. Solid curves: Chernoff bounds 
for Alice and Eve's optimum quantum receivers. Long-dashed 
curve: error-probability lower bound for Eve's optimum quan- 
tum receiver. Dot-dashed curve: Chernoff bound for Al- 
ice's homodyne receiver. Short-dashed curve: Bhattacharyya 
bound for Alice's optical parametric amplifier (OPA) receiver. 

To show that the advantage afforded by quantum illu- 
mination extends well beyond the specific example chosen 
for Fig. 1, we have used an algebraic computation pro- 
gram to obtain the following approximate forms for the 
Chernoff bounds on the error probabilities of Alice and 
Eve's optimum quantum receivers: 



Pr(e)Aiicc < 



exp(-4MKN s /N B ) 



(18) 



p , , < exp(-4M/c(l - k)N*/N b ) 
Pr(e) E vc < 2 , (19) 



which apply in the low-brightness, high-noise regime, 
viz., when Ns *C 1 and kNb 3> 1. We see that Alice's 
Chernoff bound error exponent will be orders of magni- 
tude higher than that of Eve in this regime, because 



Thus the advantageous quantum illumination behavior 
shown in Fig. 1 is typical for this regime. 

As yet we have not identified specific implementations 
for Alice or Eve's optimum quantum receivers. So, while 
we will accord Eve the right to an optimum quantum 
receiver, let us show that Alice can still enjoy an enor- 
mous advantage in error probability when she uses opti- 
cal homodyne detection [13J to measure {Ke(an m ) : 1 < 
m < M} and {Re(a/ m ) : 1 < m < M}. Conditioned 
on Bob's information bit, these homodyne measurements 
yield M iid pairs of zero mean, real- valued, jointly Gaus- 
sian random variables with common covariance matrix 



A {k) =- 

horn j 



A (~l) k C a 
{-l) k C a S 



(21) 



Using the classical Chernoff bound [lj] , we then find that 



Pr(e) ho 



< 



exp(-MKN s /N B ) 



(22) 



is an exponentially-tight upper bound on the Al- 
ice's homodyne-reception error probability in the low- 
brightness, high-noise regime. Comparing (|22|) with (fT8|) 
we see that 6 dB of error exponent has been lost by re- 
treating from optimum quantum reception to homodyne 
detection. A more effective receiver implementation can 
be developed from Guha's optical parametric amplifier 
(OPA) receiver for the quantum-illumination radar [l5j |. 
Here Alice uses an OPA to obtain modes given by 

a' m = VGai m + VG-la^ , for 1 < m < M, (23) 



where G = 1 + Ns/vkNb, and then makes a mini- 
mum error-probability decision based on the results of the 
photon-counting measurement J2m=i^m^'m- T ne Bhat- 
tacharyya bound flit ] on this receiver's error probability 
in the Ns -C 1, kNb ^> 1 regime turns out to be 



Pr(e) PA 



< 



exp 



{-2MkN s /N b ) 



(24) 



f Alicc(l/2)/f E vc(l/2) = 1/(1 - k)N, » 1. 



(20) 



which is only 3dB inferior, in error exponent, to Al- 
ice's optimum quantum receiver. We have included 
the numerically-evaluated error probability bounds for 
Alice's homodyne (Chernoff bound) and OPA (Bhat- 
tacharyya bound) receivers in Fig. 1, for the case k = 0.1, 
N s = 0.004, and Nb = 100. 

We have demonstrated that quantum illumination of- 
fers a new approach to secure communication in the lossy 
(k <C 1), noisy (kNb ^> 1), low-brightness (Ns <C 1) 
regime. In Fig. 2 we show that high noise and low 
brightness are essential to this communication scheme 
by comparing the Chernoff bounds for Alice and Eve's 
optimum quantum receivers when k — 0.1, Ns = 0.004, 
and N B = 0, and when k = 0.1, N s = 10, and Nb = 100. 
In the former situation, quantum-illumination reception 
performs worse than eavesdropping, because of Eve's col- 
lecting the lion's share of the photons sent by Alice and 
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by Bob. In the latter case, quantum-illumination re- 
ception is almost equivalent to eavesdropping, because 
the phase-sensitive cross-correlation from high-brightness 
SPDC is only slightly stronger than the classical limit. 




logio(M) 

FIG. 2: (Color online) Chernoff bounds versus M, the number 
of SPDC mode pairs, for the no-noise and high-brightness 
regimes. Optimum quantum reception and « = 0.1 is assumed 
for Alice (dashed curves) and Eve (solid curves). 

Some final points are worth noting. BPSK communica- 
tion is intrinsically phase sensitive, so Alice's receiver will 
require phase coherence that must be established through 
a tracking system. Quantum-illumination secure com- 
munication will require authentication, lest Eve insert 
herself between Alice and Bob — in a man-in-the-middlc 
attack — pretending to be Bob to Alice and Alice to Bob. 
Authentication might be carried out over a classical opti- 
cal communication link, as is done in QKD systems, and 
could be augmented by checks on the physical integrity 
of the Alice-to-Bob connection, e.g., using optical time- 
domain reflectometry on a fiber link. Finally, there is 
the path-length versus bit-rate tradeoff. Operation must 
occur in the low-brightness regime. So, as channel loss in- 
creases (k decreases), Alice must increase her mode-pair 
number M at constant N$ to maintain a sufficiently low 
error probability and communication security. If she uses 
T-sec-long time intervals for each bit, i.e., a bit rate of 
R = 1/T, with an SPDC source of IF Hz phase-matching 
bandwidth, then M = WT [TtJ implies that her bit rate 
will go down as loss increases and error probability is 
held constant. For the case shown in Fig. I, we note that 
a I THz phase-matching bandwidth and 2 /is bit dura- 
tion will yield highly-secure 500 kbit /s communication — 
Pr(e) pA < 7.15 x 10~ 6 and 0.285 < Pr(e) E vc < 0.451— 
with M = WT = 2 x 10 6 when Alice and Bob are linked 
by 50 km of 0.2dB/km loss fiber, assuming that the rest 
of their equipment is ideal. 

In conclusion, quantum illumination can provide com- 
munication that is secure against passive eavesdropping 
in an entanglement-destroying environment. Additional 
steps will be needed to defeat active attacks, in which 
Eve uses her own light to probe Bob's phase modulator. 
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